Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/A3048576EC3911EEA6178B13C4F9AE02.roa
File:                     A3048576EC3911EEA6178B13C4F9AE02.roa (raw, json)
Hash identifier:          X7fAABSVSD+9LU6mpGruwkT6PSiZnr5qD+C8yW0gUJw=
Subject key identifier:   B3:B7:53:38:57:40:FD:F1:E2:37:E8:32:1E:56:E6:F1:02:C4:4B:C4
Certificate issuer:       /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
Certificate serial:       01B6
Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/A3048576EC3911EEA6178B13C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:01:10 +0000
ROA not before:           Sat 21 Jun 2025 04:33:26 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     138995
IP address blocks:        14.192.4.0/22 maxlen: 23
                          43.224.224.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl
                          rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 03:24:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 438 (0x1b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F535, serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
        Validity
            Not Before: Jun 21 04:33:26 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a59826-95a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fc:46:3e:2a:ae:93:5a:dd:48:ff:c4:12:c1:
                    8b:6e:2a:59:6f:b9:8c:bf:1f:ec:98:b1:fd:cc:48:
                    94:e3:ee:b3:c0:ec:96:d5:db:99:96:14:82:a6:81:
                    39:65:41:0e:5c:47:3b:85:71:09:d6:a4:10:a2:05:
                    f8:1c:cb:a8:6e:33:e1:e1:c7:a9:1f:05:80:2f:62:
                    8c:c7:9c:ac:2e:e5:17:ac:00:90:4d:69:ef:5c:29:
                    aa:59:e0:65:9f:77:f2:4c:60:a8:f0:6a:ab:da:b9:
                    fa:30:93:43:e3:0e:2e:0e:ab:f8:78:e1:bc:57:d8:
                    c8:24:10:48:02:84:c3:03:27:76:0a:fc:71:aa:8a:
                    94:66:c1:f9:56:1a:84:51:00:56:1d:3e:52:67:56:
                    9e:84:d0:09:b6:f3:10:78:86:dc:b4:c7:50:eb:41:
                    18:51:51:96:10:5c:83:b7:cd:73:f3:52:92:30:49:
                    35:a2:83:41:68:af:be:b5:9f:b6:8f:61:21:59:5d:
                    a8:73:67:a7:66:e3:ae:de:64:08:2f:91:72:18:08:
                    26:0e:29:c2:39:1a:44:93:34:bb:c1:6f:d3:8d:28:
                    e9:06:d9:b9:32:39:f7:b9:28:60:cf:c9:7a:ec:a4:
                    32:82:a9:13:2d:54:79:60:38:c7:5d:28:c0:0b:09:
                    84:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B7:53:38:57:40:FD:F1:E2:37:E8:32:1E:56:E6:F1:02:C4:4B:C4
            X509v3 Authority Key Identifier:
                keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/A3048576EC3911EEA6178B13C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.192.4.0/22
                  43.224.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:4e:8b:f1:84:0b:24:7e:2c:8e:1c:57:72:a5:8d:5c:5c:3e:
         1e:0d:c4:f2:f3:bd:c4:87:d9:d3:60:29:3f:f4:16:59:bb:b7:
         37:f9:87:f3:46:21:14:bf:63:98:14:f5:4c:7a:94:b9:9a:89:
         ba:0f:95:ab:26:08:59:05:e5:79:18:93:6f:9b:65:c4:84:12:
         19:1e:ea:74:18:cd:d5:98:f6:ef:ec:34:2b:4c:64:5c:6f:92:
         3d:e5:12:46:76:b3:9a:8b:5e:35:a0:68:84:5e:bc:9d:16:80:
         3e:05:78:06:98:fb:f2:73:65:ef:4f:a2:4a:df:67:4a:71:69:
         3c:e5:71:33:0f:3d:70:b3:5d:08:87:d0:fa:b2:cd:13:4c:f0:
         e9:2d:d4:dd:14:12:8a:77:b0:a2:18:3e:b3:10:5f:2c:bf:dc:
         d7:56:44:2c:cd:3a:4d:31:34:22:8e:3e:0b:ce:fe:91:00:fc:
         58:61:0e:14:80:3f:13:34:76:57:d4:48:58:45:9a:bf:ea:b7:
         d1:34:5b:f3:b0:aa:bb:da:51:8e:a1:13:f0:d4:ef:95:36:ce:
         8b:c6:8d:3f:d8:c2:d8:81:00:76:d4:e0:ee:0b:c0:68:4b:d4:
         15:1b:96:4f:e2:d5:7f:60:58:61:55:21:53:c8:31:fe:7c:77:
         db:d5:ed:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 20:03:36 2026 by rpki-client